Summary
[0.11.1-4]
- Rebuild due to broken build auto-tagging
[0.11.1-3]
- Fix CVE-2025-5318
Resolves: RHEL-111720
[0.11.1-2]
- Bump release for October 2024 mass rebuild:
Resolves: RHEL-64018
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 10 | libssh | 0:0.11.1-4.el10_0 |
| Oracle Linux · 10 | libssh-config | 0:0.11.1-4.el10_0 |
| Oracle Linux · 10 | libssh-devel | 0:0.11.1-4.el10_0 |
Vulnerabilities 1
-
Medium 5.4
Libssh: out-of-bounds read in sftp_handle()
A flaw was found in the libssh library in versions less than 0.11.2. An out-of-bounds read can be triggered in the sftp_handle function due to an incorrect comparison check that permits the function to access memory beyond the valid handle list and to return …